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Title 

Method of Providing Key Containers 

Technical Field 

5 The invention relates to providing key containers, such as an encryption or a 

signing key container to. aid the secure transmission of messages. The invention also 
concerns a key container directory, a key container and methods of receiving a key 
container. 

1 0 Background To The Invention 

E-mail is an essential business tool for the operation modem business. It 
provides an easily used tool for the rapid transfer of information. Such information can 
be exchanged between people/machine and other people/machines. 

A popular protocol for transferring e-mail is the Simple Message Transport 
15 Protocol (SMTP). This protocol is the recognised standard for the transport of messages 
across the Internet. 

SMTP, due to its simple nature, is prone to a number of security threats. 
Amongst these is the threat to message confidentiality. When a message is transmitted 
between the sender and recipient, it passes through many intermediate devices such as 
20 e-mail relays and network routers. These devices may belong to any number of third 
parties. Each of these parties has the opportunity to access the contents of the message. 
It is difficult for the sender or the recipient to detect whether a third party had accessed, 
or copied the message. 

Further threats to message security are to its authenticity, integrity and 
25 reputability. Non-authentic messages can be easily generated whereby one entity can 
act as another so it appears as though the message was sent by the impersonated party. 
It is difficult for the recipient to determine the origin of the forged message, from the 
message per se. Furthermore, if a message is modified en-route between the sender and 
recipient, the recipient will not be able to easily identify the modification thereby 
30 putting in doubt the integrity of the whole message. Finally, the sender of a message 
can repudiate its transmission claiming that they were not the author of the message or 
that the contents had been altered due to the weaknesses outlined. 

To resolve these issues, extra security measures are required. Generally there are 
two solutions, secured networks or secured messages. In the first, messages, can be 
35 exchanged on secure networks, whereby confidentiality, authenticity, integrity and non- 
repudiation are . assured to some degree by characteristics of the network layout, 
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protection mechanisms or communications protocol. No specific security additions are 
required for the e-mail systems on these networks, as the environment is regarded as 
secure. In the latter, the message itself can be secured and safely exchanged over an 
insecure network. This requires additional security features in the e-mail client, so that 
5 it can generate and interpret secure messages. 

In general, most organisation's networks operate using the secured network 
philosophy. Messages between staff in a single organisation do not need extra security 
beyond mat provided by me isolated nature of their private network. 

Large organisations that routinely exchange a substantial deal of sensitive email 
10 messages will often interconnect their two networks via a private link or virtual private 
circuit. This link is constructed to provide a secured network path between the two 
organisations so the sensitive messages can travel in the clear over the secured link - 
the network link is regarded as being sufficiently secure to be able to protect the > 
message contents while it is in transit between the two organisations. To put in place 
15 such links, coordinated effort and expenditure by both organisations, is required and 
hence they are only used by larger, organisations where the volume of network traffic 
between the two can justify the effort. 

Messages that traverse the Internet and that require additional security typically 
use the secured message approach. This is because it is often difficult to establish 
20 secure networks between perimeter e-mail relays of sender and recipient on an ad-hoc 
basis; instead the sender and recipient agree on a way the message can be sent in a 
secured format and the intermediate e-mail systems simply deliver it as if it were a 
normal e-mail message. 

E-mail clients capable of sending secured messages are often capable of 
25 querying Internet directory services to automatically discover the means to secure 
messages for a particular recipient. 

With the rise in the amount of malicious content being transmitted via e-mail, 
many organisations are choosing to use technology at their perimeter e-mail gateways 
to scan inbound (and sometimes outbound) e-mail messages to ensure that items such 
30 as viruses, spam and pornographic material do not enter the network. These e-mail 
gateways are becoming increasingly sophisticated, but secured messages present 
specific challenges to them. The gateway, if it is to scan encrypted messages for 
prohibited content, needs to have knowledge of the secure message format being used 
and have the key to decrypt the message as it can be very difficult to determine whether 
35 an encrypted message has undesired content. 
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Pretty Good Privacy (PGP) was first developed in the early 1990s. It is a form of 
package security whereby an arbitrary blob of data can be secured using the application 
of public key cryptographic techniques. When integrated with e-mail software, PGP 
can simply take the content of an e-mail message as its input blob of data and secure it 
5 for the recipient of the message, using the recipient's public key to uniquely encrypt it 
for them. 

Privacy Enhanced Mail (PEM) was proposed in the early-1990s and like PGP 
uses public key cryptography to secure an e-mail message. 

Secure Multipart Internet Mail Extensions (S/MIME) was developed in the late 

10 1990s and was the integration of a public key cryptosystem using trusted third parties 
with the MIME standard. S/MIME is based on RS As PKCS#7 data standard. 

S/MIME uses X.509 certificates for electronic authentication of remote entities. 
The certificate contains a public key that is used to verify digital signatures and/or 
encrypt messages. The certificate also contains further attributes including tjie same 

15 entity's name and their e-mail address. 

Generally, certificates may be exchanged between parties in two ways. In the 
first mechanism, one party sends a signed message to the second. The signed message 
includes the sender's certificate(s) and the receiving party extracts it from the message 
and stores in an . electronic e-mail address book. The second party can then use the 

20 public encryption key from the first party's certificate to generate an encrypted message 
for the first party: The second mechanism involves the publication of certificates in an 
electronic directory which is accessible to other entities. The sending party retrieves the 
intended recipient's certificate using a directory access protocol, e.g. Lightweight 
Directory Access Protocol (LDAP) or using a web application connected with 

25 HyperText Transfer Protocol (HTTP). Depending on the configuration of the directory, 
a party may be able to browse for certificates, or may be able to search for certificates 
using the recipient's e-mail address, name, organisation, etc., as a search parameter. The 
automatic certificate search and retrieval mechanism is often a feature of secure e-mail 
clients. 

30 S/MIME has been integrated into e-mail clients such as Microsoft® Outlook®, 

and Lotus Notes®. It has also been implemented as a "plug-in" by third party vendors. 

S/MIME has been integrated into secure e-mail gateways. E-mail gateways join 
e-mail networks. A secure e-mail gateway can be used to join a secure and an insecure 
network. Oa the secure network, typically the organisation's network, the message 

35 travels "in-the-clear", as it does not require further . security. On the insecure network, . 
the message requires additional security, such as that available from S/MIME. 
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The secure e-mail gateway can aet as . security proxy for entities on the secure 
network. The secure e-mail gateway should be able to sign and/or 
casing from me secure network to insecure network, and decrypt and/* vatfy 
me ssagl crossmg from the insecure network to me secure network. Secured 
5 gateways remove the need for entities on secure network* to use and manage men own 
keys and encrypted e-mail which reduces costs for tire orgamaation and rebeves the 
^-userofmuchofthecomplexityofmanagingaseeuree-madnetwork. 

Secure e-mail gateways can issue proxy certificates on behalf of users on bar 
message domain. A sender that ia no. local m me gateways domain must re^s 

10 certificates from the sender's gateway. The request is m the form of an e-ma 
addressed to tire recipient s gateway. To do this, the sender must be aware of *e 
address tat tire request of tire gateway should be addressed tt, and how to . structure tire 
message to illicit tire correct reaponse from tire gateway, for example usrng a specific 
subject line to identify whose details should be in the proxy certificate. The gateway 

,5 then responds to the request by rep.yrng wim an e-mail that includes me reverted 
certificate. The sehda must men extra* the certificate from the e-mati and add ■« to 
their local e-mail address book. 

Summary of the Invention 

In a first aspect, the invention is a method of providing a key container by a key 
container directory, the key container to be used to secure a message that will be sent 
from a sender to a recipient, the method comprising the steps of: 

receiving a request for the key container from a requestor; and 
in response to the request, providing a key container to the requestor that 
25 contains a cryptographic key of a gateway that me message will transit and an address 
of the sender or the recipient. 

By providing this key container to the requestor, the sender of the message is 
able to send the message or the recipient of the message is able to receive the message 
30 without any specific knowledge that the gateway will or has acted as a security proxy . 

of the other party. ' . 

Since the key container is provided by a key container directory, the sender of 
the message need not have prior knowledge of the address of the recipient's message 
gateway Further, the sender of the message need not extract the key contamer from an 
35 e-mail from the recipient's gateway and manually store the key container in their 
address book. 



20 
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Since the key container contains the cryptographic key of the. gateway, once the 
gateway receives the message it is able to perform security related operations on the 
message such as signing or decrypting the message. This helps to increase the security 
of the message as it is transmitted over one or more computer networks wimout 
increasing the complexity of sending or receiving a message securely for a sender or 



receiver. 



The key container directory may be remote from the gateway, such as external 
to the network domain of the gateway. The key container directory may be external to 
10 the network domain of the recipient. The message may be transmitted from the sender 
over an insecure computer network, such as the Internet. The network domam of the 
recipient may be secure. . 

The step of providing a key container may comprise providing a key container 
for each gateway.that the message will transit. The request may infer the gateway that 
15 the message will transit. The method may further comprise the step of determining the 
identity of one or more gateways that the message will transit. The key container 
directory may provide multiple key containers in the response to the request. 

The step of providing a key container may comprise providing a key container 
that contains the genuine public key of the recipient. The genuine key container may 
20- be sourced from a localised data store of the provider, or the provider may obtain it 
from other known providers by real-time queries. 

The requestor may be the sender of the message. The request may include the 
address of the recipient. The request may be received from an e-mail client of the 
sender. 

25 The step of requesting the key container may include an indication that an 

encryption key container is requested. 

' The method may further comprise the step of determining what type of key 
container should be provided to the requestor. The step of determining may include 
determining whether the requestor is the sender of the message, and if so, providing an 

30 encryption key container to the requestor. The step of determining may further 
comprise determining whether the requestor is from the same domain as the gateway 
and if not, providing the encryption key container containing the cryptographic key of 
the recipient's gateway. The step of determining may further include determining 
whether the requestor is from the same domain as the gateway, and if so, providing the 

35 encryption key container having the cryptographic key of the requestor's gateway. 
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The requestor may be the gateway. The request may include the address of me 

sender. . . . 

The step of requesting the key container may include an indication that a signing 

key container is requested. 

5 * The method may further comprise the step of determining what type of key 
container should be provided to the requestor. The step of determining may further 
comprise determining whether the requestor is the gateway, and if so, providing the 
signing key container containing the cryptographic key of the gateway and the message 
sender's address. The sender's address may be from the same domain as the gateway. 

10 The step of determining may be based on parameters associated with the 

request. . , 

The method may further comprise the step of the requestor authenticating with 
the key container directory. The determining steps may be based on the ^formation 
provided by the requestor when authenticating with the key container directory. 
15 The step of authenticating may be through use of a valid username and password 

combination. ■ 

Once the request has been received, the method may former comprise the step of 
generating the requested key container. Ia this way, key containers can be generated 
when required rather than mamtaining a large repository of all possible key containers. 
20 The request may be made using a computer communication protocol, such as 

Lightweight Directory Access Protocol (LDAP), Directory Access Protocol (DAP), 
Certification Management Protocol (CMP), that of XML Key Management 
Specification (XKMS) or the HyperText Transfer Protocol (HTTP). 

The key container may contain a cryptographic key that is a public key. The 
25 key container may be a digital certificate or a Pretty Good Privacy (PGP) public key. 
The digital certificate may be an X. 509 digital certificate. The address maybe an e- 
mail address and the gateway may be an e-mail gateway. 
The key container may be for a specific message. 

The key container may contain information that invalidates its use at a time in 
30 the future. This time may be of sufficiently short duration that the key container can 
only be used for one, or at least very few messages, before another key container must 
be obtained. 

The key container may contain the same container identifiers, such as serial 
number and issuer name, of the key container of the gateway. This provides backwards 
35 compatible operation for those gateways which use these parameters to determine 
which private key to use to decrypt the message. 



WO 2005/096543 



PCT/AU2005/000487 



The key container may be an encryption key container to be used for ^Uon 
operations. The key container may contain a parameter that indicates that fce key 
container is to be used for encryption functions. M this way, the gateway can decryp 
the message when it receives it and scan the message contents as the message transits 

5 * egatC ^^ 

to encrypt the message. 

The sender's address may be from the same domain as the gateway. 
The key container may be a signing key container. The key container may 
10 contain a parameter that indicates that the key container is to be used for signing 
operations. In this way, the gateway can sign the message as it transits the gateway and 
allows the recipient of the message to use the cryptographic key to verify me signature 

The key container may secure the message by permitting the recipient to 
perform signature verification upon the message, such as by confirming the authenticity 
15 of the message sender and verify the message has maintained its integrity m transit.^. 

The key container may contain security preferences of the gateway, such as 
Secure Multipart Internet Mail Extensions (S/MME) Capabilities or PGP Symmetric 

Algorithm Preferences. . . . • • • " 

The key container may include information about, the key contamer directory 

20 that provided the key container. 

The key container may include information that permits a requestor to determine 

the authenticity and integrity of the key container. 

In a second aspect, the invention provides a key container directory operable to 
25 provide a key container as described above, wherein the key container directory is 
remote from the gateway, such external to the network domain of the gateway. 

The key container may have a datastore of cryptographic keys that can be 
contained in any provided key container. 

30 In a third aspect, the invention is a method of receiving a key container 

comprising the steps of: 

sending a request to a key container directory for a key container to be used to 
secure a message that is transmitted from a sender to a recipient; and 

receiving from the key container directory the key container that contams the 
35 cryptographic key of a gateway that the message will transit and an address of the 
sender or the recipient. 
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This method may be performed by the sender of the message. The step of 
sending may be performed by an e-mail client of the sender. 

The step of sending a request for the key container may include an indication 
that an encryption key container is requested. The step of sending the request for the 
5 key container may include the address of the recipient. 

The method may further comprise the . step of encrypting the message using the 
cryptographic key contained in the key container. 

The key container may have some of the features described above. 

This method may be performed by the gateway. 
10 The step of sending the request for the key container may include an indication 

that a signing key container is requested. The step of sending the request for the key 
container may include the address of the sender. 

The key container may have some of the features of the key container described 

above. 

15 

In a fourth aspect, the invention provides an e-mail client that is operable to 
perform the method of receiving a key container as described above. 

In a fifth aspect, the invention provides a gateway that is operable to perform the 
20 method of receiving a key container as described above., 

In a sixth aspect, the invention is a key container to be used to secure a message 
that is transmitted from a sender to a recipient using a gateway, wherein the key 
container contains a cryptographic key of the gateway, an address of the sender or the 
25 recipient and information that invalidates the use of the key container at a time in the 
future. 

The key container may have any one or more of the features described above. 

It is an advantage of at least one embodiment of the invention that the sender 
30 may consider that they have constructed an e-mail that is addressed to the recipient and 
will be decrypted by them. They do not, nor does their e-mail client require any 
knowledge of the gateway. The sender is only required to trust the key container issued 
by the key container directory. 

It is an advantage of at least one embodiment of the invention that it is 
35 backwards compatible with a wide range of existing e-mail clients. 
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It is an advantage of at least one embodiment of the invention that by enabling a 
gateway to decrypt or sign a message on behalf of the sender or recipients they do not 
require personal private/public key pairs, nor certificates. 

It is a further advantage of at least one embodiment of the invention that a 
5 sufficiently advanced secure e-mail gateway that is capable of both decrypting S/MIME 
and PGP encrypted messages or creating S/MME or PGP signatures can use the same 
private and public key pair for both encryption and signing security operations thereby 
alleviating additional key management overhead, if so desired. 

It is an advantage of at least one embodiment of the invention that by enabling 

10 the gateway to decrypt messages, the gateway is able to archive clear text messages. 
This removes the need for key archiving. 

It is an advantage of at least one embodiment of the invention that it prevents e- 
mail harvesting which in turn reduces spam e-mails. The key container directory will 
always return a key container for any e-mail address belonging to a domain for which it 

15 has the gateway's cryptographic key. This does not indicate or imply that the e-mail 
address corresponds to a valid mailbox in the domain. In conventional directory 
services if a certificate is returned for a guessed e-mail address this indicates to a 
spammer that the address is most likely real and so they can harvest addresses by 
performing extensive searches or by browsing the directory. 

20 It is an advantage of at least one embodiment of the invention that for any new 

staff that join an organisation there is no additional work beyond allocating them a 
mailbox and e-mail address on the internal mail system to allow them to receive 
encrypted messages from external parties or send signed e-mails. This reduces the 
overhead of adding secure e-mail capabilities for new staff. 

25 It is an advantage of at least one embodiment of the invention that group shared 

mailboxes, aliases and the like are also able to receive encrypted e-mail as the key 
container directory will provide key containers with these addresses contained in them. 

It is an advantage of at least one embodiment of the invention that the 
organisation's email security is centralised by using the key container directory. The 

30 organisation can reduce the amount of encrypted material within the network and the 
associated costs of managing material. , 

It is an advantage of at least one embodiment of the invention that the need of 
the directory to generate, distribute or make available revocation information about the 
key containers it has generated is negated by the short lifespan of the key containers. 

35 Similarly, clients who obtain key containers from the directory do not have to seek, 
obtain, validate and interpret the revocation, information about such short lived key 
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containers. A gateway public key that is discovered to be untrustworthy can be 
removed from the key directory system and.it therefore cannot continue to generate key 
containers with that gateway public key. 

It is an advantage of at least one embodiment of the invention that an 

5 organisation can frequently rekey its gateway key pair wherein a new private and 
public key pair are created for use by the gateway. Due to the possible short lived 
nature of the key containers, clients do not retain the key containers on their system and 
so must always obtain new key containers from the directory. The organisation can 
rekey its gateway key pair, supply the new gateway public key to the directory and the 

10 directory may immediately commence generating key containers with the new gateway 
public key contained therein. This alleviates many of the problems associated with 
conventional rekey events. Hence the invention allows for frequent rekeymg of the 
gateway keys which is regarded as producing greater security, but which is an approach 
that is often avoided because of the problems associated with it. 

15 It is an advantage of at least one embodiment of the invention that a sender of 

encrypted messages need only use a single key container directory within their e-mail 
client for the retrieval of key containers. The key container directory can obtain 
genuine key containers from a local data store or by querying the directories of other 
providers. Regardless, the sender's e-mail client only needs to be configured for a 

20 single key container directory to be able to obtain key containers of the proxy or 
genuine variety. 

It is an advantage of at least one embodiment of the invention that the sending 
secure e-mail client may receive a setof key containers from the key container provider 
which can be used to encrypt me message for each interested party along the message's 
25 delivery pathway, such as sender's secure e-mail gateway, recipient's secure e-mail 
gateway and actual recipient. If the client uses the set to encrypt the message.for all 
parties then the intervening gateways) do not have to re-encrypt the message for the 
next party. This saves cryptographic processing at the gateways and reduces the 
number of requests sent to the key container provider, thereby reducing network traffic. 

30 

Brief Description of the Drawings 

Embodiments of the invention will now be described, with reference to the 

following drawings, in which: 

Fig 1 is a schematic diagram of a computer system showing the use of an 
35 encryption key container to send an inbound e-mail message; 
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Fig. 2 is a schematic diagram of a computer system showing an alternate use of 
an encryption key container to send an outbound e-mail message; 

Fig. 3 is a schematic diagram of a computer system, showing the use of a 
signing key container to send an e-mailmessage; and 

. Fig 4 is a sequence diagram depicting the operation of a key container directory. 



Best Modes of the Invention 

Referring to Fig 1, the components of the a computer system that can send a 
message from a sender to a receiver using the invention. 
10 A first network is shown at 10 that is ah insecure network. To transmit a 

sensitive message over this insecure network 10 additional levels of security, such as 
digital signatures and encryption, are required before a message transmitted on this, 
network can be considered authentic and confidential. 

A second network is shown at 12 which is a secure network. Clear text messages 
15 on this secure network 12 require no further security. Threats to message 
confidentiality and authenticity within this network 12 are treated as low risk. 

A secure e-mail gateway as shown at 14 bridges the insecure 10 and secure 12 
networks. The gateway 14 is the domain gateway for the message domain 12. The 
secure e-mail gateway 14 has a public/private key pair used for message signing, and a 
20 public/private key pair for message encryption. The same key pair may be used for 
signing and encryption. The secure e-mail gateway 14 is capable of performmg 
requests for key containers against the key container directory 20. 

A secure e-mail client on the insecure network 10 is shown at 16. The secure e- 
mail client 16 has the capability to encrypt and decrypt messages, to sign and verify 
25 messages and perform requests for key containers against the key container, directory 
20. 

An e-mail client on the secure network 12 is shown at 18. This e-mail client 18 
is not necessarily a secure e-mail client. 

A key container directory, such as a certificate directory service is shown at 20. 
30 This directory 20 is trusted by the secure e-mail client 16. The directory 20 is able to 
produce key containers on behalf of entities on the computer network. The directory 20 
has access to or has stored the e-mail gateway's 14 public signing key and public 
encryption key. The directory is remote from the networks 10 and 12. 

An alternative deployment may replace the secure e-mail client 16 with a further 
35 secure e-mail gateway that bridges the insecure network 10 with a further secure 
network (not shown). 
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A further alternative deployment may add further directories (not shown) on.the 
insecure network 10 that the directory 20 can access. 

Intrinsic to the e-mail network are e-mail servers, e-mail relays and domain 
name servers. These are used to transport, and assist the transport of, the message from 
5 the sender to the recipient. For simplicity the invention is described without these 
conventional components. 

A user (the sender) 22 on the insecure network 10 wishes to send a message to a 
user (recipient) 24 on the secure network 12. The user 22 wishes to ensure the contents 
of the message remains confidential, at least while in transit over the insecure network 
10 10. Referring also to Fig. 1. the method for sending this inbound message will now be 

described. *v. 

The user 22 generates the message using the secure e-mail client 16 on the 
insecure network 10. The user 22 specifies at the e-mail client 16 the recipient's e-mail 
address and specifies that the message is to be encrypted. 
15 Prior to . transmission, the secure e-mail client 16 performs an authenticated 

request 40 (an unauthenticated/anonymous request is regarded as a special case of 
authenticated request) against the directory 20 for the public key containers) of the 

user 24. • • 

The directory 20 determines that the request has originated from an e-mail client 
20 16 that is external to user 24's message domain. The directory 20 generates an 

encryption key container in response. This key container embeds the public key of 

user 24's secure e-mail gateway 14 and the e-mail address of the user 24. 

This key container is then, transmitted 42 to the secure e-mail client 16. The 

secure e-mail client 16 verifies the integrity and authenticity of the key container and if 
25 satisfied it has been generated from a trustworthy source then uses the public key from 

the received key container to encrypt the message. The e-mail client 16 may or may 

not be aware that the key container received does hot contain the public key specific tp 

the user 24. 

The secure e-mail client 16 then transmits 46 the encrypted message to the user 
30 (recipient) 24. The mail system on the insecure network 10 routes this encrypted 
message to the secure e-mail gateway 14. 

The secure e-mail gateway 14 decrypts the message using its private decryption 
key. The secure e-mail gateway 14 can now perform any content analysis tasks 
required. 

35 This decrypted message is then transmitted 48 by the e-mail gateway 14 to the 

user 24. The mail system on the secure network 12 routes the message to the user's 24 
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e-mail client 18. The user 24 then retrieves the message using the mail client 18 and 
reads the message. 

With reference to Fig. 2 a further embodiment of the invention will now be 
described. The same reference numerals as those in Fig. 1 are used in Fig. 2 to 
5 represent the same components of the computer network. 

In this embodiment the user 24 (now the sender) on the network 28 wishes to 
send an outbound message to a user 22 (now the recipient) on the insecure network 10. 
The user 24 wishes to ensure the contents of the message remains confidential, even 
while in transit over the network 28 which may be secure or insecure. If the network 
10 28 is secure the sender may require further security than that which is provided on the 
network 28. 

The user 24 generates the message using the secure e-mail client 18 on the 
network 28. The user 24 specifies at the e-mail client 18 the user's 22 e-mail address 
and specifies that the message is to be encrypted. 
15 Prior to transmission, the e-mail client 18 performs an authenticated request 60 

for the public key container(s) of the user 22 against the directory 20. 

The directory 20 determines that the request has originated from a client within 
the network 28 and then generates an encryption key container in response. This key 
container embeds the secure e-mail gateway's 14 public encryption key and the user's 
20 22 e-mail address. This key container is transmitted 62 to the e-mail client 18. 

The e-mail client 18 may or may not be aware mat the key container it received 
does not contain the public key of the user 22. The e-mail client 18 verifies the 
integrity and authenticity of the key container and if satisfied it has been generated 
from a trustworthy source then uses the public key embedded within the received key 
25 container to encrypt the message. • 

The secure e-mail client 18 then transmits 64 the encrypted message to the user 
22. The mail system on the network 28 routes the message to the secure e-mail 
gateway 14. 

The secure e-mail gateway 14 decrypts the message using its private decryption 
30 key and performs any content analysis tasks required. 

The secure e-mail gateway 14 then transmits the message to the user 22. The 
message may be transmitted in this decrypted state. Alternatively, the secure e-mail 
gateway 14 can re-encrypt the message using the user's 22 genuine public key. 

The mail system on the insecure network 10 routes the message to the user's 22 
35 email client 16. The user 22 can then retrieve and read the message. 
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A further embodiment of the invention will now be described with reference to 
Fig. 3. Similarly, the same reference numerals as those in Fig. 1 are used in Fig. 3 to 
represent the same components of the computer network. 

In this embodiment the user 24 (the sender) on the secure network 12 wishes to 

5 send a message to a user 22 (the recipient) on the insecure network 10. The. user 24 
wishes the user 22 to be able to verify the message has originated from the user's 22 
message domain and to be assured that it has retained its integrity while in transit over 
the insecure network 10. 

The user 24 generates the message using the e-mail client 18 on the secure 

10 network 12. The user 24 specifies the user's 22 e-mail address and transmits 80 the 
message to the user 22. The user 24 also indicates that the message should retain its 
authenticity and integrity while on the insecure network 10. The user 24 may make this 
indication by including in the subject line of the e-mail a predetermined string of 
characters or selecting the option within the e-mail client, such as ticking a check box. 

15 The mail system on the secure network 12 routes the message to the secure e-mail 
gateway 14. 

The secure e-mail gateway 14 signs the message with its private signing key. It 
performs an authenticated request 84 against the directory 20 for the public key 
containers) of the user 24. 

20 The directory 20 determines that the request has originated from the user 24 

domain's secure e-mail gateway 14 and in consequence generates a signing public key 
container in response. This key container embeds the secure e-mail gateway's 14 public 
signing key and the sender's e-mail address, and a parameter that indicates the container 
is for use with digital signature operations. The directory 20 then transmits 86 the key 

25 container to the secure e-mail gateway 14. 

The secure e-mail gateway 14 embeds the key container within the signed 
message that has been created with the private signing key. The secure e-mail gateway 
14 transmits 88 the message and the signing public key container to the user 22 across 
the insecure network 10. 

30 The user 22 retrieves the message using the secure e-mail client 16 on the 

insecure network 10. The secure e-mail client 16 verifies the authenticity and integrity 
of the message by performing a digital signature verification operation. 

Referring now to Fig. 4. the subcomponents of the directory 20 will now be 
described which are: 

35 A directory access interface 100; 

A controller 102; 
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A certification authority, with private signing key 104; and 
A database or data store 106, which stores gateway public keys and caches 
generated public key containers. 

A requester 108 initiates the provision of public key containers. The requester 

5 108 could be a secure e-mail gateway 12 or a secure e-mail client 16. 

The operation of the directory 20 will now be described with reference to Fig. 4. 
For simplicity the provision of a single public key container in response to a request is 
described, however generation of multiple containers for various purposes in response 
to a single request is also possible. 

10 It is also possible that the directory may query the directories of other providers 

and retrieve the genuine key container of the recipient. These other providers may be 
conventional certificate directories or may be PGP public key servers. The genuine key 
container may be part of the set of key containers that is provided to the requestor 
based on a single request The requesting 

15 client 108 requests 120 a key container from the directory 20 via the directory access 
interface 100. The request may contain information that can be used to authenticate the 
requestor to the directory 20, or the request is being made within a session context 
wherein the requestor earlier authenticated themselves. The requestor 108 then 
specifies the entity for which it requires key container(s) by supplying the entity's e- 

20 mail address. The search request contains information about what type of key container 
is required by the client (either X.509 certificate or PGP public key). 

The directory access interface 100 notifies 122 the controller 102 of the request^ 
including the entity's e-mail address, the authentication credentials of the requesting 
client and the type of key container that is required. The controller 102 determines the 

25 origin of the request by comparing the presented authentication credentials with a 
known, allocated sets of credentials. Anonymous requests are deemed to originate 
from clients on the insecure network 10 while authenticated requests may either 
originate from clients within the secure network 12 or from the gateway itself 14. To 
distinguish the two, the clients within the secure network use different credentials to 

30 those used by the e-mail gateway 14. The controller 102 knows the destination domain 
based on the e-mail address in the search and hence can determine the e-mail 
gateway(s) that will be traversed by an e-mail message going from origin to 
destination. From this knowledge it can decide which form of key container to 
construct, either an encryption key container (either inbound or outbound) or a signing 

35 key container or if to obtain a genuine key container from another directory. 
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If the controller has determined that it is to return an encryption key container 
for an inbound message (see Fig. 1) then it nses the domain information from the e- 
mail address (recipient's email address) in the client search request as a parameter to 
retrieve the recipient's domain gateway's public key from the trusted database 106. 
5 If the controller 102 has determined that it is to return an encryption key 

container for an outbound message (see Fig. 2) or a signing key container (see Pig. 3) 
then it uses the domain information associated with the request's origin (either domain 
user or domain gateway) as a parameter to retrieve the domain gateway's public key 
from the trusted database 106. Alternatively, the controller retrieves the e-mail 
10 gateways key container from another directory or database, verifies the authenticity of 
the gateway's public key container and extracts the public key. 

The controller 102 then generates 126 a key container using me eertification 
authority 104. It specifies the public key as retrieved, me e-mail address of the 
requested entity and the type of key container to create. It may optionally add details of 
15 the e-mail security preferences of the gateway to the container. The certification 
authority 104 shall set the expiry date and time of the key container based on 
knowledge of the current date and time and the required lifetime of the key container. 
The certification authority 104 returns 128 the generated key. container to the 

controller 102. - • * 

20 The controller 102 optionally stores 130 the generated key container in the 

database 106. . 

The controller 102 then returns 132 the generated key container to the duectory 

access interface 100. 

The interface 100 then returns 134 the generated key container to the requesting 

25 client 108. .„ . 

The preferred implementation formats, interfaces and protocols will now be 

described. '.' m on 

The request between secure e-mail gateway 14 and key container directory 20 
uses LDAP version 3 protocol. The requestor authenticates to the directory using 
30 usemame and password exchange during the LDAP bind operation. 
Message transmission protocol is SMTP. 
Message security is provided with S/MIME version 3. 
Public key containers are X.509 version 3 certificates. 
Message digest is SHA-1. 
35 Message encryption is 3DES. 
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E-mail security prices reuuned m to X.509 certificate* 
appropriate stentad Key Usage (KeyUsage - digttalSisratere and/or keyEnctpheroten 

exteDaions and optically to S/MIME Capabilities private extenston. _ 
5 Imail elL. is Mieroaoft Outlook Express 6, operating on a Microsoft 

Windows XP platform. _ 0 

Secure e-mail client 16. is Microsoft Outlook Express 6 , opiating on 
Microsoft Windows XP platform. It uses a 1024 bit RSA private key parr. The 
publiekeyisembeddedinsr>X509certificattgeneratedbyOpenSSL. 
10 sire e-nrail gateway 14 is Cleatswift MAILsweeper 5.0 mtegrated wtm SSS 

SeourelT S/MIME component. The secure e-mail gateway 14 operate* , on Mten*oft 
Windows 2000 Server on an Intel Pentium 4 platform. It uses a 1024 btt RSA 
^public key pair. Tit. pubhc key is embedded in an X.509 certificate generated 

15 ^ directory 20 iabuUtushrg to Bouncy Castte Crypto P«^££ 
Stendard Development Kit 1.4.2 for to Certification Autbortty, OpeoLDAP 2.2.8 for 
Manoaro ueveiop a o 18 for to database. It operates usmg to 

to directory access interfece and mySQL 4.0.15 lor me natau 
QentooLinux2004.3op=ranngsystemonanIntelPentium4platform. 

It wiU be appreciated by persons skilled in to art to. — — 
20 and/or modifications may be made to to invention as shown » to 

embodiments without departing from to spirit or scope of to mvenbon m* ad.y 
described. The pfesen, embodiments are, therefore, to be constdered m aU respects as 
illustrative and not restrictive. 



